Q1. Which Cisco ASDM option configures forwarding syslog messages to email? 

A. Configuration > Device Management > Logging > E-Mail Setup 

B. Configuration > Device Management > E-Mail Setup > Logging Enable 

C. Select the syslogs to email, click Edit, and select the Forward Messages option. 

D. Select the syslogs to email, click Settings, and specify the Destination Email Address option. 

View Answer

Q2. Which protocols does the Cisco AnyConnect client use to build multiple connections to the security appliance? 

A. TLS and DTLS 

B. IKEv1 

C. L2TP over IPsec 

D. SSH over TCP 

View Answer

Q3. Which two statements about the Cisco ASA Clientless SSL VPN solution are true? (Choose two.) 

A. When a client connects to the Cisco ASA WebVPN portal and tries to access HTTP resources through the URL bar, the client uses the local DNS to perform FQDN resolution. 

B. The rewriter enable command under the global webvpn configuration enables the rewriter functionality because that feature is disabled by default. 

C. A Cisco ASA with an AnyConnect Premium Peers license can simultaneously allow Clientless SSL VPN sessions and AnyConnect client sessions. 

D. Content rewriter functionality in the Clientless SSL VPN portal is not supported on Apple mobile devices. 

E. Clientless SSLVPN provides Layer 3 connectivity into the secured network. 

View Answer

Q4. Which technology can you implement to reduce latency issues associated with a Cisco AnyConnect VPN? 

A. DTLS 

B. SCTP 

C. DCCP 

D. SRTP 

View Answer

Q5. Which protocol supports high availability in a Cisco IOS SSL VPN environment? 

A. HSRP 

B. VRRP 

C. GLBP 

D. IRDP 

View Answer

Q6. Which NGE IKE Diffie-Hellman group identifier has the strongest cryptographic properties? 

A. group 10 

B. group 24 

C. group 5 

D. group 20 

View Answer

Q7. Refer to the exhibit. 

Which type of mismatch is causing the problem with the IPsec VPN tunnel? 

A. PSK 

B. Phase 1 policy 

C. transform set 

D. crypto access list 

View Answer

Q8. Which functionality is provided by L2TPv3 over FlexVPN? 

A. the extension of a Layer 2 domain across the FlexVPN 

B. the extension of a Layer 3 domain across the FlexVPN 

C. secure communication between servers on the FlexVPN 

D. a secure backdoor for remote access users through the FlexVPN 

View Answer

Q9. Which three settings are required for crypto map configuration? (Choose three.) 

A. match address 

B. set peer 

C. set transform-set 

D. set security-association lifetime 

E. set security-association level per-host 

F. set pfs 

View Answer

Q10. A spoke has two Internet connections for failover. How can you achieve optimum failover without affecting any other router in the DMVPN cloud? 

A. Create another DMVPN cloud by configuring another tunnel interface that is sourced from the second ISP link. 

B. Use another router at the spoke site, because two ISP connections on the same router for the same hub is not allowed. 

C. Configure SLA tracking, and when the primary interface goes down, manually change the tunnel source of the tunnel interface. 

D. Create another tunnel interface with same configuration except the tunnel source, and configure the if-state nhrp and backup interface commands on the primary tunnel interface. 

View Answer